Unscored severity · published Jun 16, 2006
CVE-2006-3047
Cross-site scripting (XSS) vulnerability in TikiWiki 1.9.3.2 and possibly earlier versions allows remote attackers to inject arbitrary web script or HTML via unknown attack…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in TikiWiki 1.9.3.2 and possibly earlier versions allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TC
Tikiwiki Cms/groupware · Tiki
through 1.9.3.1; 1.9.0; 1.9.0; 1.9.0; 1.9.0; 1.9.1; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3047
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3047
Vendor Advisory
http://secunia.com/advisories/20648
Exploit
http://secunia.com/advisories/20850
securityreason.com
http://securityreason.com/securityalert/1102
Patch
http://sourceforge.net/project/shownotes.php?group_id=64258&release_id=423840
www.gentoo.org
http://www.gentoo.org/security/en/glsa/glsa-200606-29.xml
www.securityfocus.com
http://www.securityfocus.com/archive/1/437017/100/0/threaded
More from Tikiwiki Cms/groupware
9.8
CVE-2025-34111
Tiki Wiki <= 15.1 ELFinder Unauthenticated File Upload RCE
9.8
CVE-2010-4239
Tiki Wiki CMS Groupware 5.2 has Local File Inclusion
9.8
CVE-2012-0911
TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted serialized object in the (1) cookieName to…
8.8
CVE-2020-29254
TikiWiki 21.2 allows templates to be edited without CSRF protection
8.8
CVE-2010-4241
Tiki Wiki CMS Groupware 5.2 has CSRF